CHECK POINT SOFTWARE TECHNOLOGIES LTD

Check Point Software Technologies Ltd. (“Check Point” or the “Company”) today announced that the Company has identified a security vulnerability affecting Remote Access VPN and Mobile Access functionality in certain configurations of Check Point’s security gateway products, and has released a software update that addresses this vulnerability. As of the date of this filing, the Company is not aware of its own network being affected by this vulnerability. Under certain circumstances, the vulnerability could be exploited to obtain unauthorized access to an environment in which the affected products are deployed.

The Company became aware of the vulnerability on June 4, 2026, and it activated the Company’s research and incident response procedures, initiated an investigation, and worked to identify a solution to remediate the vulnerability. While the investigation is ongoing, the Company has identified instances of unauthorized access to customer environments through the exploitation of this vulnerability.

The Company has published a security advisory describing the affected configurations, mitigation measures, observed indicators of compromise, and providing upgrade guidance, available on a dedicated blog on its website athttps://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol. While the Company’s investigation remains ongoing, Check Point is communicating directly with customers known to have deployed affected configurations.

Based on the available information and the investigation to date, the Company has not determined that this matter is reasonably likely to have a material impact on the Company, including its financial condition or results of operations.